dependabot-python 0.118.3 → 0.118.8

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: '096e75f3e4a994ff56563035d72d9f6ab530e401a44ed9b2dbc6311ecb32b387'
-  data.tar.gz: 38e01b056f81def3feab7bab3cdd9288186aa933e77b5397324d235a8f93dde1
+  metadata.gz: 9960f0164740e21e8840ed3bbace2c82b51a74170a3b77fc48c4379d79e288b8
+  data.tar.gz: 7a2287ea82a4f3794965fbb3f08deb4600d6347aefe1ebfeaac5373be6499ada
 SHA512:
-  metadata.gz: 4a72b36509ad0b9b12540306e0bbcf9c0876df144d3e44874603ac3e6b63ef34fefc2ee17d3f172c3f342891ad4f1b264543bb625636c80c9ddb516a8a6726af
-  data.tar.gz: 82b18a2a994a76df0b223a1cf6a73ce6f11dc0512059760a24d4150603e93ece2d63d1dacdb7e2dfc74416a14f0ddbb43ef920700ffd804846864be9400c1ff4
+  metadata.gz: b5f766297c4ca83adf22e0df25aca4f65e774dea1354aa690b79be17a9f81308610df350e8ed4a9e4c140e61c42f7a7a3efb7bd4e2b25ca5baa3241ad508e932
+  data.tar.gz: c4ab053b8219818d3334f560119ece67e65a263437c50e07dceeb62891f370bd955a9472e0177ad8d94df876e8cb230bd210b6e06b3c6829a50f1275bd14a03c

data/helpers/build

@@ -17,4 +17,4 @@ cp -r \
 
 cd "$install_dir"
 PYENV_VERSION=2.7.18 pyenv exec pip install -r "requirements.txt"
-PYENV_VERSION=3.8.3  pyenv exec pip install -r "requirements.txt"
+PYENV_VERSION=3.8.5  pyenv exec pip install -r "requirements.txt"

data/helpers/requirements.txt

@@ -6,4 +6,4 @@ pipfile==0.0.2
 poetry==1.0.9
 
 # Some dependencies will only install if Cython is present
-Cython==0.29.20
+Cython==0.29.21

data/lib/dependabot/python/file_parser.rb

@@ -181,12 +181,14 @@ module Dependabot
           each do |file|
             path = file.name
             FileUtils.mkdir_p(Pathname.new(path).dirname)
-            File.write(path, remove_imports(file.content))
+            File.write(path, remove_imports(file))
           end
       end
 
-      def remove_imports(content)
-        content.lines.
+      def remove_imports(file)
+        return file.content if file.path.end_with?(".tar.gz", ".whl", ".zip")
+
+        file.content.lines.
           reject { |l| l.match?(/^['"]?(?<path>\..*?)(?=\[|#|'|"|$)/) }.
           reject { |l| l.match?(/^(?:-e)\s+['"]?(?<path>.*?)(?=\[|#|'|"|$)/) }.
           join

data/lib/dependabot/python/file_updater/pyproject_preparer.rb

@@ -36,6 +36,7 @@ module Dependabot
         end
 
         # rubocop:disable Metrics/PerceivedComplexity
+        # rubocop:disable Metrics/CyclomaticComplexity
         def freeze_top_level_dependencies_except(dependencies)
           return pyproject_content unless lockfile
 
@@ -53,6 +54,8 @@ module Dependabot
 
               next unless (locked_version = locked_details&.fetch("version"))
 
+              next if locked_details&.dig("source", "type") == "directory"
+
               if locked_details&.dig("source", "type") == "git"
                 poetry_object[key][dep_name] = {
                   "git" => locked_details&.dig("source", "url"),
@@ -69,6 +72,7 @@ module Dependabot
           TomlRB.dump(pyproject_object)
         end
         # rubocop:enable Metrics/PerceivedComplexity
+        # rubocop:enable Metrics/CyclomaticComplexity
 
         private
 

data/lib/dependabot/python/python_versions.rb

@@ -4,13 +4,13 @@ module Dependabot
   module Python
     module PythonVersions
       PRE_INSTALLED_PYTHON_VERSIONS = %w(
-        3.8.3 2.7.18
+        3.8.5 2.7.18
       ).freeze
 
       # Due to an OpenSSL issue we can only install the following versions in
       # the Dependabot container.
       SUPPORTED_VERSIONS = %w(
-        3.8.3 3.8.2 3.8.1 3.8.0
+        3.8.5 3.8.4 3.8.3 3.8.2 3.8.1 3.8.0
         3.7.7 3.7.6 3.7.5 3.7.4 3.7.3 3.7.2 3.7.1 3.7.0
         3.6.9 3.6.8 3.6.7 3.6.6 3.6.5 3.6.4 3.6.3 3.6.2 3.6.1 3.6.0
         3.5.7 3.5.6 3.5.5 3.5.4 3.5.3

data/lib/dependabot/python/version.rb

@@ -114,7 +114,6 @@ module Dependabot
       # TODO: Delete this once we're using a version of Rubygems that includes
       # https://github.com/rubygems/rubygems/pull/2651
       #
-      # rubocop:disable Metrics/CyclomaticComplexity
       # rubocop:disable Metrics/PerceivedComplexity
       # rubocop:disable Style/CaseEquality
       # rubocop:disable Layout/LineLength
@@ -146,7 +145,6 @@ module Dependabot
 
         return 0
       end
-      # rubocop:enable Metrics/CyclomaticComplexity
       # rubocop:enable Metrics/PerceivedComplexity
       # rubocop:enable Style/CaseEquality
       # rubocop:enable Layout/LineLength

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: dependabot-python
 version: !ruby/object:Gem::Version
-  version: 0.118.3
+  version: 0.118.8
 platform: ruby
 authors:
 - Dependabot
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2020-06-18 00:00:00.000000000 Z
+date: 2020-07-24 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: dependabot-common
@@ -16,14 +16,14 @@ dependencies:
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.118.3
+        version: 0.118.8
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.118.3
+        version: 0.118.8
 - !ruby/object:Gem::Dependency
   name: byebug
   requirement: !ruby/object:Gem::Requirement
@@ -114,14 +114,14 @@ dependencies:
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: 0.85.0
+        version: 0.88.0
   type: :development
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: 0.85.0
+        version: 0.88.0
 - !ruby/object:Gem::Dependency
   name: vcr
   requirement: !ruby/object:Gem::Requirement